PT-2017-1617 · Linux+5 · Linux Kernel+5

Published 2017-03-16 · Updated 2023-02-10 · CVE-2017-7187

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 4.10.4

Description The issue is related to the sg ioctl function in the Linux kernel, which allows local users to cause a denial of service or possibly have other impacts via a large command size in an SG NEXT CMD LEN ioctl call. This leads to out-of-bounds write access in the sg write function, caused by a stack-based buffer overflow.

Recommendations For Linux kernel versions through 4.10.4, update to a version later than 4.10.4 to resolve the issue. As a temporary workaround, consider restricting access to the sg ioctl function to minimize the risk of exploitation.

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2017-1442

ALT-PU-2017-1443

BDU:2017-00770

CESA-2017_1842

CVE-2017-7187

OPENSUSE-SU-2017_1140-1

OPENSUSE-SU-2017_1215-1

RHSA-2017:1842

RHSA-2017:2077

RHSA-2017:2669

RHSA-2017_1842

RHSA-2017_2077

SUSE-SU-2017:1183-1

SUSE-SU-2017:1247-1

SUSE-SU-2017:1301-1

SUSE-SU-2017:1360-1

SUSE-SU-2017:1990-1

SUSE-SU-2017:2342-1

SUSE-SU-2017:2525-1

USN-3291-1

USN-3291-2

USN-3291-3

USN-3293-1

USN-3361-1

USN-3422-1

USN-3422-2

Affected Products

Alt Linux

Centos

Linux Kernel

Red Hat

Suse

Ubuntu

References · 705

• https://ubuntu.com/security/CVE-2017-2671 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5550 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6001 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-6214 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-7187 · Security Note
• https://ubuntu.com/security/CVE-2017-5970 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-8924 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3293-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7294 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-3291-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7541 · Vendor Advisory
• https://osv.dev/vulnerability/USN-3361-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7645 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-5546 · Vendor Advisory
• https://ubuntu.com/security/CVE-2017-7261 · Vendor Advisory